<feed xmlns='http://www.w3.org/2005/Atom'>
<title>ydb/yt, branch oidc-1.2.0</title>
<subtitle>Mirror of YDB github repos</subtitle>
<id>https://code.mastervirt.ru/ydb/atom?h=oidc-1.2.0</id>
<link rel='self' href='https://code.mastervirt.ru/ydb/atom?h=oidc-1.2.0'/>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/'/>
<updated>2025-06-25T16:13:01Z</updated>
<entry>
<title>YQL-20119: Fix DQ Writer</title>
<updated>2025-06-25T16:13:01Z</updated>
<author>
<name>mrlolthe1st</name>
<email>mrlolthe1st@yandex-team.com</email>
</author>
<published>2025-06-25T15:57:08Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=959be4342ad11e12c493a3bda2a76532bd128682'/>
<id>urn:sha1:959be4342ad11e12c493a3bda2a76532bd128682</id>
<content type='text'>
commit_hash:1a422ba873228aca94b8625134eb7df8d65dcbb5
</content>
</entry>
<entry>
<title>YT-24877: Fix race in timing reader base</title>
<updated>2025-06-25T11:20:01Z</updated>
<author>
<name>coteeq</name>
<email>coteeq@yandex-team.com</email>
</author>
<published>2025-06-25T10:34:59Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=2222f3630b785b894608290ae5d51e24a7731fa1'/>
<id>urn:sha1:2222f3630b785b894608290ae5d51e24a7731fa1</id>
<content type='text'>
* Changelog entry
Type: fix
Component: map-reduce

`chunk_reader_statistics/wait_time` was not reliable due to the race in the timer.
In rare cases, though visible in large installations, we could accidentally
add a high value (roughly the time since the last exec node reboot) to the reported time.
commit_hash:25ab772047ecb16194e3740884b7b9c0bf996219
</content>
</entry>
<entry>
<title>Introduce yt.StaticNetworkProject pragma</title>
<updated>2025-06-25T08:27:52Z</updated>
<author>
<name>aneporada</name>
<email>aneporada@yandex-team.com</email>
</author>
<published>2025-06-25T07:44:00Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=766e56cf1df73b7db3280fcb18a96030086bcf16'/>
<id>urn:sha1:766e56cf1df73b7db3280fcb18a96030086bcf16</id>
<content type='text'>
commit_hash:17bdb3745954b7b7d606c374090c5f28c9b7119a
</content>
</entry>
<entry>
<title>Switch TTabletManager to virtual interface</title>
<updated>2025-06-24T19:18:28Z</updated>
<author>
<name>ifsmirnov</name>
<email>ifsmirnov@yandex-team.com</email>
</author>
<published>2025-06-24T19:06:51Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=55cdb44decfd610ddefbcbf7ef9b4b8799937564'/>
<id>urn:sha1:55cdb44decfd610ddefbcbf7ef9b4b8799937564</id>
<content type='text'>
commit_hash:2ce8952e7e1da466264de530778e4d62a490f52c
</content>
</entry>
<entry>
<title>YQL-20099: Properly handle dq yt reader finish (unref state + set to finish)</title>
<updated>2025-06-24T11:03:29Z</updated>
<author>
<name>mrlolthe1st</name>
<email>mrlolthe1st@yandex-team.com</email>
</author>
<published>2025-06-24T10:40:36Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=7ad54f585b44a26b4c619ab33dcfe06fd0add315'/>
<id>urn:sha1:7ad54f585b44a26b4c619ab33dcfe06fd0add315</id>
<content type='text'>
commit_hash:fe26cf5614a17d4a637d93b27831d8392b6164ee
</content>
</entry>
<entry>
<title>yt/core/bus: fail connection if client TLS certificate is required but not provided</title>
<updated>2025-06-24T06:22:13Z</updated>
<author>
<name>Konstantin Khlebnikov</name>
<email>khlebnikov@tracto.ai</email>
</author>
<published>2025-06-24T06:06:29Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=a95172fb1009f3b9872c662737eb32c621a45104'/>
<id>urn:sha1:a95172fb1009f3b9872c662737eb32c621a45104</id>
<content type='text'>
SSL flag "SSL_VERIFY_PEER" indeed requests and verifies client certificate.
But it does _nothing_ if client have not provided any TLS certificate.
Safe behaviour needs also flag "SSL_VERIFY_FAIL_IF_NO_PEER_CERT".

* fail client certificate verification without client certificate
* add additional check that certificate is available after TLS handshake
* log peer certificate fingerprint to track connectivity
* add early failure on client side to avoid wasting time on TLS handshake
* add test cases for mutual TLS certificate verification

Signed-off-by: Konstantin Khlebnikov &lt;khlebnikov@tracto.ai&gt;

---

* Changelog entry
Type: fix
Component: misc-server

Fix mTLS in bus RPC

---

Pull Request resolved: https://github.com/ytsaurus/ytsaurus/pull/1311
commit_hash:b798a7ca11eed5d5ca4eb6c6dda30c8152ec011d
</content>
</entry>
<entry>
<title>Intermediate changes</title>
<updated>2025-06-24T02:23:50Z</updated>
<author>
<name>robot-piglet</name>
<email>robot-piglet@yandex-team.com</email>
</author>
<published>2025-06-24T02:11:49Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=4f0adbc3bccf023f6866dece3db16df537268153'/>
<id>urn:sha1:4f0adbc3bccf023f6866dece3db16df537268153</id>
<content type='text'>
commit_hash:f5108a0c0a9b2dded45c472f1b1fd37da0e43c68
</content>
</entry>
<entry>
<title>YT-21942: Fix some bugs in adaptive row count mechanics</title>
<updated>2025-06-23T19:42:43Z</updated>
<author>
<name>pogorelov</name>
<email>pogorelov@yandex-team.com</email>
</author>
<published>2025-06-23T19:28:26Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=faff5fbac2a68d292458799103fa1776d106e355'/>
<id>urn:sha1:faff5fbac2a68d292458799103fa1776d106e355</id>
<content type='text'>
commit_hash:e4863185d0a54cb33733e0741baf20b7aa2cd612
</content>
</entry>
<entry>
<title>YQL-19921: Proper handle {} and []</title>
<updated>2025-06-23T13:26:26Z</updated>
<author>
<name>mrlolthe1st</name>
<email>mrlolthe1st@yandex-team.com</email>
</author>
<published>2025-06-23T12:34:35Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=98b1e58cb59bd61df43699a36053a1ef1589d63f'/>
<id>urn:sha1:98b1e58cb59bd61df43699a36053a1ef1589d63f</id>
<content type='text'>
commit_hash:c0d84e9086c46ed6c059307704d44f9f3e5c75b9
</content>
</entry>
<entry>
<title>Deny some system write settings at IO discovery stage</title>
<updated>2025-06-23T12:10:26Z</updated>
<author>
<name>aneporada</name>
<email>aneporada@yandex-team.com</email>
</author>
<published>2025-06-23T11:02:41Z</published>
<link rel='alternate' type='text/html' href='https://code.mastervirt.ru/ydb/commit/?id=0133b00bb26b7f9040d1ba71da735b68e4e2a2c0'/>
<id>urn:sha1:0133b00bb26b7f9040d1ba71da735b68e4e2a2c0</id>
<content type='text'>
commit_hash:3b7c27bdd06c1542229fc930ce628ee035c3a3ed
</content>
</entry>
</feed>
